Granted Patent B2

US 12,641,066 · App. 18/573,556 · Granted May 26, 2026

Inventors: Ke Zeng (Hangzhou, CN); Yong Chen (Hangzhou, CN); Hongquan Zhang (Hangzhou, CN); Lingtao Kong (Hangzhou, CN); Han Xiao (Hangzhou, CN); Xiaokang Qin (Hangzhou, CN); Bin Yang (Hangzhou, CN)

Assignee: Alipay (Hangzhou) Information Technology Co., Ltd.

H04L63/0485H04L45/745H04L47/125H04L61/2589

Abstract

Claims (77)

1 . A communication method based on a relay cluster, wherein the relay cluster comprises a load balancing server and at least two relay servers; the communication method comprises:

receiving a relay request packet sent by a client, wherein the relay request packet comprises a transaction identifier, and the transaction identifier comprises a mode field and a routing information field;

acquiring routing information of a first relay server of the at least two relay servers based on a value of the mode field and a value of the routing information field in the relay request packet; and

sending a relay allocation packet carrying the routing information of the first relay server to the client, so that the client establishes a relay channel based on the routing information of the first relay server;

wherein the method further comprises:

receiving a data packet sent by the client through the relay channel, wherein the data packet comprises the mode field and the routing information field in the transaction identifier; and

sending the data packet to the first relay server based on a value of the mode field and a value of the routing information field in the data packet;

wherein in the data packet, the value of the mode field represents a specific address mode, the routing information field comprises an encrypted address field and an encrypted port field, a value of the encrypted address field is an encrypted intranet IP address of the first relay server, and a value of the encrypted port field is encrypted information about a first port;

the sending the data packet to the first relay server comprises:

decrypting the encrypted address field and the encrypted port field in the data packet separately based on a pre-acquired decryption key; and

after it is learned through parsing that, in the data packet, the value of the mode field represents a specific address mode, sending the data packet to the first port of the first relay server based on the intranet IP address of the first relay server and the information about the first port that are obtained through decryption.

2 . The method according to claim 1 , wherein

the routing information of the first relay server comprises an encrypted intranet IP address of the first relay server and encrypted information about a first port;

the intranet IP address is an IP address of the first relay server in an intranet formed by the relay cluster; the first port is a relay port allocated to the client on the first relay server.

3 . The method according to claim 2 , wherein the relay allocation packet comprises an encrypted relay address;

the encrypted relay address comprises an encrypted address field and an encrypted port field;

in the relay allocation packet, the encrypted address field is used to carry the encrypted intranet IP address of the first relay server, and the encrypted port field is used to carry the encrypted information about the first port.

4 . The method according to claim 3 , wherein the encrypted relay address further comprises an attribute type field and/or a reserved field;

in the relay allocation packet, a value of the attribute type field represents secure routing information.

5 . The method according to claim 1 , wherein the client is an initiator of establishing the relay channel;

in the relay request packet, the value of the mode field represents an arbitrary mode, and the value of the routing information field is a random string;

the acquiring routing information of a first relay server of the at least two relay servers comprises:

when it is learned through parsing that, in the relay request packet, the value of the mode field represents an arbitrary mode, and the value of the routing information field is a random string, selecting the first relay server from the at least two relay servers according to a load balancing rule;

sending the relay request packet to a default service port of the first relay server; and

receiving the routing information sent by the first relay server.

6 . The method according to claim 1 , wherein the client is a responder of establishing the relay channel;

in the relay request packet, the value of the mode field represents a specific server mode, the routing information field comprises an encrypted address field, and a value of the encrypted address field is an encrypted intranet IP address of the first relay server;

the acquiring routing information of a first relay server of the at least two relay servers comprises:

decrypting the encrypted address field in the relay request packet based on a pre-acquired decryption key to obtain the intranet IP address of the first relay server;

after it is learned through parsing that, in the relay request packet, the value of the mode field represents a specific server mode, sending the relay request packet to a default service port of the first relay server based on the obtained intranet IP address; and

receiving the routing information sent by the first relay server.

7 . The method according to claim 1 , wherein each packet is a packet based on the Traversal Using Relays around NAT (TURN) protocol.

8 . A communication method based on a relay cluster, wherein the relay cluster comprises a load balancing server and at least two relay servers; the at least two relay servers comprise a first relay server; the communication method comprises:

sending a relay request packet to the load balancing server, wherein the relay request packet comprises a transaction identifier, and the transaction identifier comprises a mode field and a routing information field, so that the load balancing server acquires routing information of the first relay server based on a value of the mode field and a value of the routing information field in the relay request packet;

acquiring the routing information of the first relay server from a relay allocation packet sent by the load balancing server;

establishing a relay channel based on the routing information of the first relay server; and

sending a data packet to the load balancing server through the relay channel, so that the load balancing server forwards the data packet to the first relay server based on the value of the mode field and the value of the routing information field in the transaction identifier comprised in the data packet;

wherein the routing information field comprises an encrypted address field and an encrypted port field; the sending a data packet to the load balancing server comprises:

setting the value of the mode field in the data packet to represent a specific address mode;

setting a value of the encrypted address field in the data packet to an encrypted intranet IP address of the first relay server;

setting a value of the encrypted port field in the data packet to encrypted information about a first port; and then

sending the data packet to the load balancing server.

9 . The method according to claim 8 , wherein the routing information of the first relay server comprises an encrypted intranet IP address of the first relay server and encrypted information about a first port of the first relay server;

the intranet IP address is an IP address of the first relay server in an intranet formed by the relay cluster; the first port is a relay port allocated to the client on the first relay server.

10 . The method according to claim 9 , wherein the relay allocation packet comprises an encrypted relay address;

the encrypted relay address comprises an encrypted address field and an encrypted port field;

the acquiring routing information of the first relay server comprises:

obtaining the encrypted intranet IP address of the first relay server from the encrypted address field of the relay allocation packet, and obtaining the encrypted information about the first port from the encrypted port field of the relay allocation packet.

11 . The method according to claim 8 , wherein the client is an initiator of establishing the relay channel;

the sending a relay request packet to the load balancing server comprises:

setting the value of the mode field in the relay request packet to represent an arbitrary mode, and setting the value of the routing information field in the relay request packet to a random string, and then sending the relay request packet to the load balancing server.

12 . The method according to claim 8 , wherein the client is a responder of establishing the relay channel, and the routing information field comprises an encrypted address field;

the sending a relay request packet to the load balancing server comprises:

setting the value of the mode field in the relay request packet to represent a specific server mode, and setting a value of the encrypted address field in the relay request packet to an encrypted intranet IP address of the first relay server, and then sending the relay request packet to the load balancing server.

13 . The method according to claim 8 , wherein each packet is a packet based on the Traversal Using Relays around NAT (TURN) protocol.

14 . A computing device, comprising a memory and a processor, wherein the memory stores executable instructions that, in response to execution by the processor, cause the processor to:

receive a relay request packet sent by a client, wherein the relay request packet comprises a transaction identifier, and the transaction identifier comprises a mode field and a routing information field;

acquire routing information of a first relay server of the at least two relay servers based on a value of the mode field and a value of the routing information field in the relay request packet; and

send a relay allocation packet carrying the routing information of the first relay server to the client, so that the client establishes a relay channel based on the routing information of the first relay server;

wherein the memory further stores executable instructions that, in response to execution by the processor, cause the processor to:

receive a data packet sent by the client through the relay channel, wherein the data packet comprises the mode field and the routing information field in the transaction identifier; and

send the data packet to the first relay server based on a value of the mode field and a value of the routing information field in the data packet;

wherein in the data packet, the value of the mode field represents a specific address mode, the routing information field comprises an encrypted address field and an encrypted port field, a value of the encrypted address field is an encrypted intranet IP address of the first relay server, and a value of the encrypted port field is encrypted information about a first port;

the sending the data packet to the first relay server comprises:

decrypting the encrypted address field and the encrypted port field in the data packet separately based on a pre-acquired decryption key; and

after it is learned through parsing that, in the data packet, the value of the mode field represents a specific address mode, sending the data packet to the first port of the first relay server based on the intranet IP address of the first relay server and the information about the first port that are obtained through decryption.

15 . A non-transitory computer-readable storage medium comprising instructions stored therein that, when executed by a processor of a computing device, cause the processor to:

receive a relay request packet sent by a client, wherein the relay request packet comprises a transaction identifier, and the transaction identifier comprises a mode field and a routing information field;

acquire routing information of a first relay server of the at least two relay servers based on a value of the mode field and a value of the routing information field in the relay request packet; and

send a relay allocation packet carrying the routing information of the first relay server to the client, so that the client establishes a relay channel based on the routing information of the first relay server;

wherein instructions, when executed by the processor of the computing device, further cause the processor to:

receive a data packet sent by the client through the relay channel, wherein the data packet comprises the mode field and the routing information field in the transaction identifier; and

send the data packet to the first relay server based on a value of the mode field and a value of the routing information field in the data packet;

wherein in the data packet, the value of the mode field represents a specific address mode, the routing information field comprises an encrypted address field and an encrypted port field, a value of the encrypted address field is an encrypted intranet IP address of the first relay server, and a value of the encrypted port field is encrypted information about a first port;

the sending the data packet to the first relay server comprises:

decrypting the encrypted address field and the encrypted port field in the data packet separately based on a pre-acquired decryption key; and

after it is learned through parsing that, in the data packet, the value of the mode field represents a specific address mode, sending the data packet to the first port of the first relay server based on the intranet IP address of the first relay server and the information about the first port that are obtained through decryption.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (30)